41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill implements the advertised Excel→CSV→JSON→JWT→POST pipeline, but contains hard-coded credentials, a hard-coded internal API endpoint, and mismatches between SKILL.md parameters and the actual...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772608572465,
        "_id": "k97baqnbx5hkhwmk23fv5h269d828684",
        "changelog": "Major update: Full rewrite and industrial stabilization of the IQC control plan parsing engine.\n\n- Introduced a robust 4-step workflow: Excel preprocessing, CSV to JSON parsing, security JWT authentication, and enterprise data submission.\n- Enhanced error recovery with global retry, safe exit fallback, and automated logging\/alarm handlers.\n- Added industrial-grade logging and output management (INFO-level, persistent logs, compressed JSON output).\n- Optimized for low-randomness model inference and stable sequential execution.\n- Improved security with explicit JWT token expiry and Bearer Token auth mode.\n- Documented all settings in a detailed, transparent SKILL.md.",
        "changelogSource": "user",
        "createdAt": 1772608572465,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "kangigocc",
        "handle": "kangigocc",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/40585735?v=4",
        "kind": "user",
        "linkedUserId": "kn738cwsxfr15td7thgd9gwenx829s6h"
    },
    "ownerHandle": "kangigocc",
    "skill": {
        "_creationTime": 1772608572465,
        "_id": "kd7a1qq5b9q8t3pkw0gbjmcw61829k7b",
        "badges": [],
        "createdAt": 1772608572465,
        "displayName": "工业化数据处理",
        "latestVersionId": "k97baqnbx5hkhwmk23fv5h269d828684",
        "ownerUserId": "kn738cwsxfr15td7thgd9gwenx829s6h",
        "slug": "iqc-python-tree",
        "stats": {
            "comments": 0,
            "downloads": 211,
            "installsAllTime": 1,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "工业级 IQC 控制计划解析，支持 Excel 转 CSV、JSON，含安全认证及数据提交，保证企业数据处理稳定可靠。",
        "tags": {
            "latest": "k97baqnbx5hkhwmk23fv5h269d828684"
        },
        "updatedAt": 1774329016431
    }
}